https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:05:29 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:8643 <p><strong>Affected:</strong> AlmaLinux:9: varnish, AlmaLinux:9: varnish-devel, AlmaLinux:9: varnish-docs</p> <p>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don&#39;t have to create the same web page over and over again, giving the website a significant speed up.</p> <p>Security Fix(es):</p> <p>* varnish: Request Forgery Vulnerability (CVE-2022-45060)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: varnish, AlmaLinux:9: varnish-devel, AlmaLinux:9: varnish-docs</p> <p>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don&#39;t have to create the same web page over and over again, giving the website a significant speed up.</p> <p>Security Fix(es):</p> <p>* varnish: Request Forgery Vulnerability (CVE-2022-45060)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:8643 https://cve.radiocsirt.org/vuln/bdu:2024-03247 bdu:2024-03247 https://cve.radiocsirt.org/vuln/bdu:2024-03247 https://cve.radiocsirt.org/vuln/bit-varnish-2022-45060 <p><strong>Affected:</strong> Bitnami: varnish</p> <p>An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.</p> <p><strong>Affected:</strong> Bitnami: varnish</p> <p>An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.</p> https://cve.radiocsirt.org/vuln/bit-varnish-2022-45060 https://cve.radiocsirt.org/vuln/euvd-2026-236269 EUVD-2026-236269 https://cve.radiocsirt.org/vuln/euvd-2026-236269 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45060 <p>An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.</p> <p>An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-45060 https://cve.radiocsirt.org/vuln/ghsa-78x9-jhxm-553x <p>An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.</p> <p>An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.</p> https://cve.radiocsirt.org/vuln/ghsa-78x9-jhxm-553x https://cve.radiocsirt.org/vuln/gsd-2022-45060 gsd-2022-45060 https://cve.radiocsirt.org/vuln/gsd-2022-45060 https://cve.radiocsirt.org/vuln/oesa-2022-2111 <p><strong>Affected:</strong> openEuler:22.03-LTS: varnish</p> <p>This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture. Security Fix(es): An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.(CVE-2022-45060)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: varnish</p> <p>This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture. Security Fix(es): An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.(CVE-2022-45060)</p> https://cve.radiocsirt.org/vuln/oesa-2022-2111 https://cve.radiocsirt.org/vuln/opensuse-su-2022:10198-1 <p>Security update for varnish</p> <p>Security update for varnish</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:10198-1 https://cve.radiocsirt.org/vuln/rhsa-2022:8644 <p>varnish: Request Forgery Vulnerability</p> <p>varnish: Request Forgery Vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8644 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45060 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: varnish, Ubuntu:Pro:20.04:LTS: varnish, Ubuntu:Pro:22.04:LTS: varnish</p> <p>An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: varnish, Ubuntu:Pro:20.04:LTS: varnish, Ubuntu:Pro:22.04:LTS: varnish</p> <p>An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45060 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2036 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Varnish HTTP Cache ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Varnish HTTP Cache ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2036